Which of the following would be direct evidence that the criminal defendant, a former cashier for a home improvement store, committed a cash larceny scheme that resulted in the theft of more than $5,000 from the store?