Property Brush of interface IUIX_Pen returns Pointer to IUIX_Brush ...
HRESULT get_Brush([out, retval] IUIX_Brush** ppBrush);
See also IUIX_Pen.