Thank you for coming back with real test results rather than impressions!
Your two tests together are conclusive. You uninstalled Norton, rebooted, and the crash disappeared on both. That is the test that actually proves something, and it means Norton is the trigger. Your instinct was right from the start.
That said, the Event Viewer entry was not misleading, and the two facts fit together rather than contradicting each other. Norton injects itself into excel.exe. The component that gives way under that injection is Office's, which is why the faulting module is AppVIsvSubsystems64.dll and not a Symantec one. Norton is the cause, Office's virtualization layer is the casualty. That single picture explains everything you observed: why your friend's machine with a different antivirus was fine, why disabling and whitelisting changed nothing while uninstalling changed everything, since those hooks stay loaded as long as the product is installed, and why repairing Office could not help, because nothing was broken in Office to begin with.
One detail worth noting: the link you posted is the Microsoft Store listing, so your Excel is the Store-packaged build. It is the same desktop Excel, but that packaging is the one that leans hardest on the virtualization layer that faulted. That is very likely why this combination breaks on your machine and not everywhere.
Now the part that matters for selling next month, since you cannot ask your customers to uninstall their antivirus.
The measure we would put first is code signing your compiled application. Earlier in this thread, signing plus an exclusion is what resolved this same Norton behaviour for another user. We want to be straight with you about what it does and does not do: signing will not switch off Norton's behavioural engine, so it is not a guarantee. But publisher reputation is a heavy input into how aggressively that engine treats a process, and an unsigned freshly built executable that hosts Excel is close to the worst profile you can present to it. You also need signing anyway to sell without SmartScreen warnings scaring off your buyers, so it is not effort spent only on this problem.
There is a free way to get most of that benefit immediately, before buying anything. In the distribution options, choose the EXE plus XPLAPP Application Bundle format instead of a single standalone executable. In that format the main launcher is already signed by us, so your application presents a valid signature without you purchasing a certificate. You distribute the resulting files together. Your own certificate remains the stronger option later, since then the signature carries your name, but the bundle costs nothing and you can test it today.
Your second lever is the one you already found yourself. You confirmed that rebuilding with "Save changes automatically and load them without prompt next time" does not crash, because no browse dialog is ever shown and the failing path is never entered. If that save behaviour suits your product, shipping that way removes this crash from your launch entirely, whatever antivirus your customers run. Given your deadline, I would treat that as the decision to make first and the signing as what you do in parallel.
There is a third avenue worth five minutes, even though I want to be careful not to oversell it. You did try the SetDefaultSaveFilename snippet and reported no change, but you also said your default file path was Documents. On Windows 11 that is one of the worst possible choices for this: it is a shell-heavy location and it is frequently redirected to OneDrive without the user ever being asked. Another customer with a similar crash, from a completely different cause, resolved his by pointing that call at a plain, ordinary local folder that no sync client and no shell extension manages, something like C:\YourApp\Data rather than Documents or Desktop. There is one trap to know about: the call only takes effect if the folder already exists, so create it first from your VBA before calling it, otherwise it silently does nothing and the dialog opens wherever the shell decides. Given that removing Norton is what actually fixed your machine, we would not expect this to be the whole answer for you, but it is cheap to test and it costs you nothing to have your application always point somewhere dull and local.
For the occasional customer who still reports it, the exclusions that matter in Norton are not the plain file exclusions. They are the SONAR and behavioural protection exclusions plus Proactive Exploit Protection, and the only way to confirm Norton is involved on their machine is a temporary uninstall and reboot, exactly as you did.
There is one more thing you can do: you are a Norton customer with a valid license, which means you have access to their technical support. We do not. A crash report coming from a paying subscriber carries considerably more weight with them, and it is the kind of report their support desk will escalate to their own developers. You have an unusually strong case to hand them, because you already did the work: a reproducible crash on a blank Excel workbook, the Event Viewer entry naming AppVIsvSubsystems64.dll with exception 0xc0000005, no crash on a machine with a different antivirus, and the crash disappearing the moment Norton 360 is uninstalled and reappearing when it is reinstalled. That is a cleaner report than most vendors ever receive. If they fix it on their side, it is fixed for every one of your customers at once, which no workaround on our side can achieve.
And to answer your question, you can open a ticket here, no account needed:
https://www.gdgsoft.com/support/ticket
Thanks again!