Answer
Database-repository-hosted attachments are stored in the EDM_FILE_STORAGE_TAB table, with the actual file content held in its FILE_DATA column — query that table directly (joined through the appropriate document keys) to locate or extract a specific attachment's stored content.