Could someone who knows please tell me how the kernel determines that
an executable file is (for example) a linux binary, and provides
emulation accordingly?

Is this information somehow encoded in the file, or is it based on the
process' behavior, like detecting a linux-type syscall or some such.

Thanks for any help,
-- 
Frode Vatvedt Fjeld