1. A host system comprising: at least one hardware processor configured to execute a hypervisor, the hypervisor configured to expose a guest virtual machine (VM), a first virtual container (VC), and a second VC, wherein exposing the first and second VCs includes setting up a first memory domain for the first VC and a second memory domain for the second VC, the first and second memory domains isolated from each other and from a memory domain of the quest VM, wherein: the guest VM is configured to execute a malware scanner on a virtualized processor of the guest VM; and the hypervisor is further configured to: in response to setting up the first memory domain, map a memory page containing a part of the malware scanner to a first memory page within the first memory domain, in response to setting up the second memory domain, map the memory page containing the part of the malware scanner to a second memory page within the second memory domain, in response to the guest VM launching a first instance of the malware scanner to determine whether a first target object comprises malware, switch a memory context of the first instance of the malware scanner from the memory domain of the guest VM to the first memory domain, and in response to the guest VM launching a second instance of the malware scanner to determine whether a second target object comprises malware, switch a memory context of the second instance of the malware scanner from the memory domain of the guest VM to the second memory domain.