hybrid attack Netntlm too slow

[undeath]

your are doing something weird. Why are you using -a6 with a 7 char mask when you're trying to crack a LM hash? The plaintext cannot be longer than 7 chars. -a6 is only fast if your left side has enough candidates. piping is best solution. To check your speed just check if hashcat's speed matches your expectation.

but then the estimated time is always 0 sec.

When piping candidates hashcat cannot calculate the estimated time.