I believe that that you can check KEY_EVENT_RECORD.wVirtualScanCode. It should contain SCANCODE_SIMULATED (0x0200) flag in case of press of real AltGr key - as part of simulation of Alt + Ctrl press.
KEY_EVENT_RECORD.wVirtualScanCode
SCANCODE_SIMULATED
0x0200