1. A host system comprising at least one processor configured to execute a hypervisor, the hypervisor configured to expose a guest virtual machine (VM) and a virtual container (VC), wherein exposing the VC includes setting up a memory domain of the VC, the memory domain of the VC isolated from a memory domain of the guest VM, wherein: the guest VM is configured to execute a malware scanner on a virtualized processor of the guest VM, the malware scanner configured to scan a target object for malware; and wherein the hypervisor is further configured to: in response to setting up the memory domain of the VC, map a memory page containing a part of the malware scanner to a memory page within the memory domain of the VC; and in response to a launch of the malware scanner by the guest VM, switch a memory context of the malware scanner from the memory domain of the guest VM to the memory domain of the VC.