The estimated time is only an estimation based on statistics we had,
there are cases where it can take much longer (depends on the machine's performances and resources)
You can review the deployment logs and see if it makes progress, most likely it does.
https://docs.microsoft.com/en-us/advanced-threat-analytics/troubleshooting-ata-using-logs#ata-deployment-logs
